Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-56104Chainlit < 2.10.1 Session Hijacking via WebSocket Session RestorationPyPI · chainlit · fixed in 2.10.1
- CVE-2026-10561Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins InjectionPyPI · langflow · fixed in 1.10.1
- CVE-2025-66336Apache Doris MCP Server: SQL injection leading the authentication bypassPyPI · doris-mcp-server · fixed in 0.6.1
- CVE-2026-56265Crawl4AI - Authentication Bypass via Hardcoded JWT Signing KeyPyPI · crawl4ai · fixed in 0.8.7
- CVE-2025-71378picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle FilesPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71357picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommandPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71351picklescan - Remote Code Execution via timeit.timeit() Detection BypassPyPI · picklescan · fixed in 0.0.25
- CVE-2025-71348picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config BypassPyPI · picklescan · fixed in 0.0.28
- CVE-2026-12799BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorizationPyPI · litellm
- CVE-2026-12798BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgeryPyPI · litellm
- CVE-2026-12797BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorizationPyPI · litellm
- CVE-2026-12796BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expirationPyPI · litellm
- CVE-2026-12795BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authenticationPyPI · litellm
- CVE-2026-12773BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authenticationPyPI · litellm · fixed in 1.84.0
- CVE-2026-12772BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expirationPyPI · litellm
- CVE-2026-12771BerriAI litellm M2M JWT user_api_key_auth.py improper authorizationPyPI · litellm
- CVE-2026-12770BerriAI litellm Admin Key key_management_endpoints.py improper authorizationPyPI · litellm
- CVE-2026-56340vLLM - Denial of Service via Unvalidated Multimodal EmbeddingsPyPI · vllm · fixed in 0.13.0
- CVE-2025-71379vllm - Regular Expression Denial of Service in Multiple ComponentsPyPI · vllm · fixed in 0.9.0
- CVE-2026-5366Git Argument Injection in prefecthq/prefectPyPI · prefect · fixed in 3.6.25
- CVE-2026-56304picklescan - Arbitrary File Creation via logging.FileHandler DeserializationPyPI · picklescan · fixed in 1.0.1
- CVE-2026-49291mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/callPyPI · mcp-memory-service · fixed in 10.65.3
- CVE-2026-56078PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitorPyPI · praisonaiagents · fixed in 1.5.115
- CVE-2026-56075PraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode OverridePyPI · praisonai · fixed in 4.5.128
- CVE-2026-56074PraisonAI - Tool Approval Cache Bypass via Coarse-Grained CachingPyPI · praisonaiagents · fixed in 4.5.128
- CVE-2026-54017Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversalPyPI · open-webui · fixed in 0.9.6
- CVE-2026-49257mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bindPyPI · mcp-pinot-server · fixed in 3.1.0
- CVE-2026-54533vantage6 node has an Improper Access Control issuePyPI · vantage6 · fixed in 5.0.0
- CVE-2026-54445Vantage6: Set admin user and password from environment or configurationPyPI · vantage6 · fixed in 5.0.0
- CVE-2024-27928Vantage6: 2FA can be circumvented with hacked email accessPyPI · vantage6 · fixed in 5.0.0